Canadian Phishing Scammer Exposed For Stealing Over $1 Million In Crypto And NFTs

The series’ famous detective, ZachXBT, has exposed yet another crypto scammer responsible for stealing millions of dollars in digital assets using sophisticated phishing attacks.

The thief’s targets included the discord services of DeFi projects such as Orbiter Finance and Pika Protocol.

Impersonation and forfeiture

in the Twitter thread published On Monday, ZachXBT explained that the attacker, Soup (aka Dan), scammed him by impersonating Luke Hamilton – an employee of encrypted media outlet Decrypt.

In collaboration with other scammers, Soup lured team members of various crypto projects to join a fake Decrypt Discord server. He then tricked them into providing KYC information as part of the fake application and interview process, only to later include the phishing attack in an “elaborate attempt to steal their Discord token”.

2/ The soup is made fake @employee locations and pretends to be Luke Hamilton (a real decryption employee)

He works with other scammers to contact members of the Crypto Projects team to trick them into joining a fake Discord decryption server in an elaborate attempt to steal their Discord token pic.twitter.com/Oe6mX2zFk1

– ZachXBT (@zachxbt) July 17, 2023

A Discord token is an alphanumeric string that represents a user’s login credentials, giving them access to any servers they own or are a part of.

The scammer hacked the Pika Protocol Discord server on May 30, 2023, and posted a malicious link in the ad channel, allowing them to He steals $220,000 in crypto. In a private DM, Dan admitted to receiving 15% of the scammers’ earnings.

The next day, scammers attacked Orbiter Finance, using a malicious link to steal another $760,000. Soup admitted to receiving 30% of the stolen funds, of which 7.5 ETH was identified in one of his funds. known addresses.

Soup spent some of the proceeds of his crimes on five-figure Roblox exclusives.

ZachXBT added that Soup was involved in the Mutant Ape Yacht Club heist (MAYC NFT #21080) last year. Together with his fraud partner, Faint, the two minted a fake MAYC and offered it to a victim for the real MAYC, which the victim I accepted.

Soup also stole Cryptopunk #6983 in January this year.

“Soup admits he made $1 million himself while his partners made even more,” ZachXBT wrote. “He appears to show little remorse for his actions after hurting projects and people financially.”

Blue connection

ZachXBT was able to track down one of Soup’s addresses after a fraudster accidentally exposed it upon proving that ENS’s purplelobster.eth address was controlled by Blue – another fraudster exposed by ZachXBT last week. Blue sent $25 worth of ETH $25 soup at the time.

Blue, a former YouTuber turned NFT scammer, also had connections to Monkey Drainer, who is known for stealing over $24 million in digital collectibles and flaunting his heists online. In some of its recent phishing attacks, Blue has expropriated more than $200,000 worth of cryptocurrency and NFTs from yancy.eth and LoveMake.eth addresses.

“It’s disgusting to see these phishing scammers showing no remorse and spending money on tasteless items,” ZachXBT said at the time.